Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64A7E46AE87A11EFB5477AA2762E951A.roa
File: 64A7E46AE87A11EFB5477AA2762E951A.roa (raw, json)
Hash identifier: xyuW9jWU2gt0Qfp+I5sbUioZJEQ+wS2wepk6Hv6/xOw=
Subject key identifier: E9:B1:27:F7:50:F0:96:2F:67:CB:0E:17:5F:43:43:CE:28:04:C0:DC
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 05EF
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64A7E46AE87A11EFB5477AA2762E951A.roa
Signing time: Tue 11 Feb 2025 13:16:25 +0000
ROA not before: Tue 11 Feb 2025 13:16:13 +0000
ROA not after: Wed 11 Feb 2026 13:16:13 +0000
asID: 401120
IP address blocks: 196.251.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:16:13 2025 GMT
Not After : Feb 11 13:16:13 2026 GMT
Subject: CN=67ab4da9-7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:dc:5e:e2:4f:6e:fb:d3:64:89:09:94:0d:
9c:bf:63:92:08:03:8a:c2:23:87:8a:b5:d5:6f:ec:
f5:e4:35:7d:fc:99:ff:1f:a6:78:c8:05:a5:24:ea:
5e:89:aa:12:bd:f0:5a:32:6c:c9:4b:b0:52:e5:bd:
66:b5:3a:c8:2f:5d:59:27:ce:41:99:75:40:b8:3a:
96:7f:39:30:de:5f:c8:5a:83:66:8f:5c:be:9d:4b:
99:c8:06:67:f8:a7:f3:7f:07:8a:f1:21:71:01:3a:
5f:aa:a7:b1:0e:f5:95:df:9e:3b:c1:36:21:d6:1c:
19:60:83:39:fe:38:2f:56:63:c2:bc:d8:da:49:09:
a9:08:6f:57:5e:60:87:18:51:a2:9d:32:45:1e:94:
64:d5:1c:c3:95:c5:44:f5:1a:11:73:a6:2b:2c:ad:
a8:01:c7:65:e6:a3:7c:4c:66:d8:b7:47:66:21:36:
46:de:7e:a2:70:69:ef:b0:34:76:cd:c2:17:f5:30:
8e:0d:18:bb:81:04:60:c2:1f:63:33:a6:e9:83:b2:
ab:1e:2e:97:4f:81:98:f7:f5:8d:c2:fe:5b:ae:af:
1d:23:9a:ee:77:58:96:ad:cc:01:92:d5:9a:54:d9:
31:f8:86:71:b8:c4:cc:61:0a:0f:d6:a9:e0:db:6f:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:27:F7:50:F0:96:2F:67:CB:0E:17:5F:43:43:CE:28:04:C0:DC
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64A7E46AE87A11EFB5477AA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.90.0/24
Signature Algorithm: sha256WithRSAEncryption
36:28:09:61:f1:d0:f9:4a:73:40:2b:3b:1b:e3:81:e1:4d:62:
a5:9c:bc:a7:1b:78:42:9d:3c:1f:26:8d:fc:d8:e4:1b:e2:d4:
93:70:f5:71:a7:bf:37:10:39:52:5f:ef:89:fd:2e:c2:a9:bd:
95:db:d4:f1:e3:f5:e7:af:ad:c5:54:f1:b5:08:73:cc:5c:b1:
f2:c2:fe:22:e5:b6:f3:55:88:cd:6c:16:bc:58:e0:a4:15:ee:
fc:64:1a:c6:57:c9:ea:fb:2a:d7:6a:14:5a:b3:e9:70:12:29:
b5:81:bc:fe:7e:93:b9:a3:e9:91:5b:1d:bd:22:cf:81:8c:4e:
e8:59:c8:62:9c:74:5f:a9:a9:3a:c9:02:f8:9f:79:e4:c4:d8:
11:e2:3a:4d:2e:c8:63:76:f6:7c:d0:c0:a6:6f:b7:96:f1:41:
2c:14:4d:77:d8:9b:a0:05:d1:11:9f:aa:84:07:e7:2f:57:d8:
ff:af:2b:7a:58:ad:2f:4a:70:c1:ee:1a:e0:2a:b2:25:92:f3:
0e:76:60:60:6e:90:06:a2:69:e9:c2:42:d2:51:f5:26:97:98:
ec:49:03:84:43:b2:7d:0e:5c:48:e3:cf:d5:b9:fc:fd:a5:98:
b5:fe:09:46:ee:9b:bf:f8:3b:6f:b6:72:5c:0d:6d:80:ed:45:
fd:7f:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:15 2025 by rpki-client